Last updated: November 2026
This Privacy Policy describes how LogicGateGames LLC handles information when you use Theca (the "App"), a file manager, storage cleaner and encrypted vault for Android. By using the App you agree to the practices described here.
1. Your Files Never Leave Your Phone
Theca shows, opens, copies, moves, compresses, cleans and encrypts the files on your phone, and all of that happens on your phone. There is no account, no sign-in and no cloud sync. We operate no servers for your files, so there is nowhere for them to be sent.
The App does use the internet: to fetch advertisements, to ask for your ad consent where the law requires it, to talk to Google Play about purchases, and to send a crash report if the App crashes. Your files, file names, folders and Vault are not part of any of these.
2. All Files Access
A file manager has to see your files, so Theca asks for Android's "All files access" permission, and explains why before Android's screen opens. The App uses it only to list, open and manage the files on your phone's storage, SD cards and USB drives, at your request, and to find what the Cleaner shows you. Android keeps other apps' private folders (Android/data and Android/obb) closed to every app, Theca included. You can withdraw the permission at any time in Android's settings.
3. Usage Access (Optional)
Only if you open the Cleaner's "Unused apps" card or the storage map's apps and choose to allow it, Theca asks for Android's "Usage access". With it, Theca reads on your phone when each app you installed was last used and how much space it takes, to list apps you have not opened for a long time and to show your apps on the storage map. This information is not stored by Theca and never leaves your phone. Theca never offers system apps for removal, and uninstalling an app always happens through Android's own screen, where you confirm it.
4. The Vault
Documents you move into the Vault are encrypted on your phone with AES-256-GCM, using a key kept in the Android Keystore, and the original is removed. The Vault does not take photos or videos. The names of Vault files are encrypted too. Your PIN itself is never stored. To check it, the App keeps only a salted hash of the PIN, sealed under the same Keystore key, so it is of no use away from this phone. Fingerprint unlock, if you switch it on, is handled by Android; the App never receives your fingerprint. PDFs and text files open inside the Vault without a decrypted copy being saved to storage.
If you forget your PIN, we cannot recover it or your Vault: we never have the key. A Vault backup, below, is the way to keep a copy.
5. Vault Backup
You can save the whole Vault to one file, encrypted with a passphrase. This only happens when you ask for it, and Android asks you where the file goes. Once saved, the file is under your control; if you put it somewhere that syncs to a cloud service, that service's terms apply to it. Without the passphrase the file cannot be read, by us or anyone else.
6. Information Collected By The Services In The App
We do not collect your name, email address or phone number, and we do not sell personal information. The Google services built into the App do collect data, and we list them here because having no server of our own is not an exemption:
- Google AdMob - Shows ads to users who have not bought Theca Pro. Ads are never shown inside the Vault. AdMob collects the Advertising ID (a resettable device identifier), ad interaction data, device model, operating system version, and approximate location derived from your IP address. You can reset or delete the Advertising ID in your device settings.
- Google User Messaging Platform - Where the law requires it, asks for your consent to personalised ads and stores your answer on your device. You can change your answer at any time in the App's Settings, under "Ad privacy choices".
- Firebase Crashlytics - If the App crashes, or hits certain errors it recovers from, a report is sent so we can fix the problem. It contains the technical details of the error, the device model, Android version, app version, a random installation ID and which app installed Theca (for example Google Play). Reports contain no name, email or advertising ID, and none of your files, file names or Vault contents. Reports are kept for up to 90 days.
- Google Play In-App Review - Once, after Theca has done its job a few times, the App may ask Google Play to show its rating sheet. Your rating goes to Google Play; the App is not told whether or how you rated it.
- Google Play Billing - Handles the one-time Theca Pro purchase. Google tells the App whether you own it. We never see your card or payment details.
7. What Is Stored On Your Device
- Your settings: language, appearance, list or grid view, sort order, whether hidden files are shown.
- Your favourites and colour tags (the paths of the files and folders you chose).
- The Trash list: what you deleted and where it came from, so it can be restored. Items in the Trash are removed after 30 days.
- The Vault: the encrypted files, their encrypted names, the sealed PIN hash, and a count of recent wrong PINs (for the waiting time between tries).
- Whether you have bought Theca Pro, and your ad-consent answer.
The App is excluded from Android's device backup: the Vault's key cannot leave the phone, so a restored copy could never be opened. Use the Vault backup instead. Everything the App stores is removed when you uninstall it, the Vault included, unless you have made a Vault backup. Files still in the Trash are the exception: they sit in a hidden folder named ".Theca Trash" on your storage, and stay there until you empty the Trash or delete that folder.
8. Children
Theca is a general-purpose file manager. It is not directed at children under 13, and we do not knowingly collect information from them.
9. Changes To This Policy
If this policy changes, the updated version will be posted on this page with a new "Last updated" date.
10. Contact
Questions about this policy: logicgategames@gmail.com